Tenda

Records1964All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical648CVSS 9.0–10.0

CVSS high1091CVSS 7.0–8.9

Exploited now

Tenda records in CISA KEV

TI-2018-10434 Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability CRITICAL 100KEV 2021-11-03 TI-2020-08863 Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability CRITICAL 100KEV 2021-11-03 TI-2021-11772 Tenda AC11 Router Stack Buffer Overflow Vulnerability CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Ac6 Firmware 108 records HIGH Ac18 Firmware 103 records HIGH Ac10 Firmware 92 records CRITICAL Ac9 Firmware 92 records CRITICAL Ac15 Firmware 85 records CRITICAL Ac7 Firmware 72 records CRITICAL Fh1202 Firmware 63 records HIGH W30e Firmware 63 records HIGH

Records

72 records in Ac7 Firmware · all components

TI-2018-10434 CVE-2018-14558 · GHSA-jh5j-w2c9-jcff

An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7)…

CRITICAL 100KEV

An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with firmware through V15.03.06.23_CN(AC10).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0851 Published 2018-10-30 No fix listed CWE-78

TI-2026-37683 CVE-2026-51846 · GHSA-j57g-r926-cwvq

In Tenda AC7 v15.03.06.44, the wanSpeed parameter of the route /goform/AdvSetMacMtuWan…

HIGH 82

In Tenda AC7 v15.03.06.44, the wanSpeed parameter of the route /goform/AdvSetMacMtuWan has a stack buffer overflow vulnerability that can lead to remote arbitrary code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00845 Published 2026-06-19 No fix listed CWE-121

TI-2026-37682 CVE-2026-51845 · GHSA-m32v-ppvw-wwc8

Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the…

HIGH 82

Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the mac parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00555 Published 2026-06-19 No fix listed CWE-121

TI-2026-37681 CVE-2026-51844 · GHSA-g533-f37w-h6w3

Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the…

HIGH 82

Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the cloneType parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00555 Published 2026-06-19 No fix listed CWE-121

TI-2026-37680 CVE-2026-51843 · GHSA-8wjp-x79j-qqmp

Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the…

HIGH 82

Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the wanMTU parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00555 Published 2026-06-19 No fix listed CWE-121

TI-2025-20996 CVE-2025-29135 · GHSA-v767-x36h-4gv8

A stack-based buffer overflow vulnerability in Tenda AC7 V15.03.06.44 allows a remote…

HIGH 82

A stack-based buffer overflow vulnerability in Tenda AC7 V15.03.06.44 allows a remote attacker to execute arbitrary code through a stack overflow attack using the security parameter of the formWifiBasicSet function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01096 Published 2025-03-24 No fix listed CWE-121

TI-2024-21260 CVE-2024-32301 · GHSA-68jw-xf9h-cqhm

Tenda AC7V1.0 v15.03.06.44 firmware has a stack overflow vulnerability via the PPW…

HIGH 82

Tenda AC7V1.0 v15.03.06.44 firmware has a stack overflow vulnerability via the PPW parameter in the fromWizardHandle function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00807 Published 2024-04-17 No fix listed CWE-125

TI-2023-20197 CVE-2023-38937 · GHSA-cc8w-76p8-9x8m

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0…

HIGH 82

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, AC9 V3.0 V15.03.06.42_multi and AC10 v4.0 V16.03.10.13 were discovered to conta…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00838 Published 2023-08-07 No fix listed CWE-787

TI-2023-20196 CVE-2023-38936 · GHSA-j9fx-3j3q-8wjq

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0…

HIGH 82

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6, AC9 V3.0 V15.03.06.42_multi and FH1205 V2.0.0.7(775) were discovered to contain a s…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0085 Published 2023-08-07 No fix listed CWE-787

TI-2023-20193 CVE-2023-38933 · GHSA-7qcr-6r25-v563

Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0…

HIGH 82

Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42_multi, and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the dev…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00838 Published 2023-08-07 No fix listed CWE-787

TI-2023-20191 CVE-2023-38931 · GHSA-98fv-pj8r-pcqr

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0…

HIGH 82

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and FH1203 V2.0.1.6 were discovered to c…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00838 Published 2023-08-07 No fix listed CWE-787

TI-2023-20190 CVE-2023-38930 · GHSA-9238-9cw4-x8wq

Tenda AC7 V1.0,V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0,V15.03.06.28, AC9…

HIGH 82

Tenda AC7 V1.0,V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0,V15.03.06.28, AC9 V3.0,V15.03.06.42_multi and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the deviceId parameter in the addWifiMacFilter func…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00838 Published 2023-08-07 No fix listed CWE-787

TI-2023-19238 CVE-2023-37717 · GHSA-92p7-r7fp-gqf8

Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7…

HIGH 82

Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromDhcpListClient.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00928 Published 2023-07-14 No fix listed CWE-787

TI-2023-19237 CVE-2023-37716 · GHSA-7mp7-mmq3-mrhv

Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7…

HIGH 82

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00928 Published 2023-07-14 No fix listed CWE-787

TI-2023-19235 CVE-2023-37714 · GHSA-x6gc-pwv7-hxcm

Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack…

HIGH 82

Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromRouteStatic.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00928 Published 2023-07-14 No fix listed CWE-787

TI-2026-04335 CVE-2026-4974 · GHSA-m2mh-w42r-cfwf

Tenda AC7 POST Request SetSysTimeCfg fromSetSysTime memory corruption

HIGH 73

A flaw has been found in Tenda AC7 15.03.06.44.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00644 Published 2026-03-27 No fix listed CWE-119

TI-2025-10563 CVE-2025-11528 · GHSA-x2cq-2qgv-mhp9

Tenda AC7 saveAutoQos stack-based overflow

HIGH 73

A vulnerability was identified in Tenda AC7 15.03.06.44.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00817 Published 2025-10-09 No fix listed CWE-119

TI-2025-10562 CVE-2025-11527 · GHSA-hw42-h3c4-83pw

Tenda AC7 fast_setting_pppoe_set stack-based overflow

HIGH 73

A vulnerability was determined in Tenda AC7 15.03.06.44.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00817 Published 2025-10-09 No fix listed CWE-119

TI-2025-10561 CVE-2025-11526 · GHSA-6jx7-g77j-r3qv

Tenda AC7 WifiMacFilterSet stack-based overflow

HIGH 73

A vulnerability was found in Tenda AC7 15.03.06.44.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00821 Published 2025-10-09 No fix listed CWE-119

TI-2025-10560 CVE-2025-11525 · GHSA-33q3-mv77-cgr2

Tenda AC7 SetUpnpCfg stack-based overflow

HIGH 73

A vulnerability has been found in Tenda AC7 15.03.06.44.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01057 Published 2025-10-09 No fix listed CWE-119

TI-2025-10559 CVE-2025-11524 · GHSA-44q3-8687-wr2p

Tenda AC7 SetDDNSCfg stack-based overflow

HIGH 73

A flaw has been found in Tenda AC7 15.03.06.44.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01053 Published 2025-10-09 No fix listed CWE-119

TI-2025-08269 CVE-2025-9023 · GHSA-xffp-g8q4-6v4h

Tenda AC7/AC18 SetLEDCfg formSetSchedLed buffer overflow

HIGH 73

A vulnerability has been found in Tenda AC7 and AC18 15.03.05.19/15.03.06.44.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00942 Published 2025-08-15 No fix listed CWE-119

TI-2025-07335 CVE-2025-8017 · GHSA-x7rp-rm5v-55v3

Tenda AC7 httpd setMacFilterCfg formSetMacFilterCfg stack-based overflow

HIGH 73

A vulnerability was found in Tenda AC7 15.03.06.44.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.13198 Published 2025-07-22 No fix listed CWE-119

TI-2025-05290 CVE-2025-5862 · GHSA-6vfc-8w2v-vx36

Tenda AC7 setPptpUserList formSetPPTPUserList buffer overflow

HIGH 73

A vulnerability was found in Tenda AC7 15.03.06.44 and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01108 Published 2025-06-09 No fix listed CWE-119

TI-2025-05289 CVE-2025-5861 · GHSA-w866-3fpp-r6c4

Tenda AC7 AdvSetLanip fromadvsetlanip buffer overflow

HIGH 73

A vulnerability has been found in Tenda AC7 15.03.06.44 and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.07572 Published 2025-06-09 No fix listed CWE-119

Open these records in search →

Critical	648
High	1091
Medium	217
Low	8
No CVSS	0